1. Who We Are

HelloMello ("we," "us," or "our") is an event management company organizing carnivals, kids' talent shows, drawing competitions, and fashion shows in Tirupur, Tamil Nadu, India. We are the data controller for all personal information collected through our website and events.

2. Information We Collect

2.1 Personal Information for Event Registrations

• Participant Information: Name, age, gender, school name
• Parent/Guardian Information: Name, contact number, relationship to participant
• Contact Details: Phone numbers, email addresses (when provided)
• Event-Specific Information: Talent descriptions, age categories, special requirements

2.2 Business Information for Stall Bookings

• Personal Details: Full name, role in business
• Business Information: Brand name, product categories
• Contact Information: WhatsApp number, email address, Instagram handle
• Website Information: Business website (optional)

2.3 Payment Information

• UPI Transaction Details: Transaction IDs for verification
• Payment Gateway Data: Information processed through Razorpay (we do not store complete payment card details)
• Order Information: Payment amounts, order IDs, payment status

2.4 Technical Information

• Device Information: IP address, browser type, device type, screen resolution
• Usage Data: Pages visited, time spent on site, form interactions, navigation patterns
• Performance Data: Page load times, website errors, network information
• Cookies: Essential cookies for website functionality

3. How We Use Your Information

3.1 Primary Purposes

• Event Registration: Processing registrations for competitions and shows
• Communication: Sending event updates, confirmations, and important notices
• Payment Processing: Handling registration fees and stall booking payments
• Event Management: Organizing age-appropriate categories and logistics

3.2 Legal Basis for Processing

We process your personal data based on:

• Consent: Your explicit consent for event registration and marketing communications
• Contract Performance: Processing necessary for providing our event services
• Legal Obligation: Compliance with tax, accounting, and child protection laws
• Legitimate Interest: Improving our services and preventing fraud

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

• Razorpay: Payment processing (governed by Razorpay's privacy policy)
• Netlify: Website hosting and form processing
• Sentry: Error tracking, performance monitoring, and analytics (governed by Sentry's privacy policy: https://sentry.io/privacy/)
• Communication Services: WhatsApp and email service providers for notifications

4.2 We Do Not Sell Your Data

We never sell, rent, or lease your personal information to third parties for their marketing purposes. We only share data as described in this policy or with your explicit consent.

4.3 Legal Disclosures

We may disclose your information when required by law, court order, or to protect the safety of our participants, particularly children at our events.

5. Data Retention

• Event Registration Data: Retained for 3 years for record-keeping and future event invitations
• Payment Records: Retained for 7 years as required by Indian tax laws
• Communication Records: Retained for 1 year unless you request deletion
• Technical Data: Retained for 1 year for website analytics and security
• Error Data: Retained for 90 days to diagnose and fix website issues
• Performance Data: Retained for 30 days to improve website speed and functionality
• Session Replays: Retained for 30 days to understand user experience issues (only when errors occur)

6. Your Rights Under DPDP Act 2023

As a Data Principal, you have the following rights:

6.1 Right to Access

You can request a copy of all personal data we hold about you.

6.2 Right to Correction

You can request correction of inaccurate or incomplete personal data.

6.3 Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements and legitimate business needs.

6.4 Right to Data Portability

You can request your data in a structured, commonly used format.

6.5 Right to Grievance Redressal

You can raise complaints about our data processing practices.

7. Children's Privacy Protection

• Parental Consent: We require parental consent for all children's event registrations
• Limited Data Collection: We collect only essential information needed for event participation
• Secure Processing: Children's data receives enhanced security measures
• No Marketing: We do not send marketing communications directly to children
• Right to Deletion: Parents can request deletion of their child's data at any time

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption: All data transmission is encrypted using SSL/TLS
• Access Controls: Limited access to personal data on a need-to-know basis
• Secure Storage: Data stored in secure, compliant hosting environments
• Regular Updates: Security measures are regularly reviewed and updated
• Staff Training: Our team is trained on data protection best practices

9. International Data Transfers

We primarily process data within India. When we use international service providers (like hosting services), we ensure appropriate safeguards are in place to protect your data according to Indian law standards.

10. Grievance Redressal

11. Contact Information

For questions about this Privacy Policy or our data practices, you can reach us at:

12. Governing Law

This Privacy Policy is governed by the Laws of India, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000. Any disputes will be subject to the jurisdiction of the Courts of Tirupur, Tamil Nadu.